Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 19:54:56.113 00:05:04.108 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 19:59:34.194 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36638 9 6412 1 2025-11-13 19:55:56.095 00:05:04.148 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 19:56:57.065 00:05:03.198 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:02:03.746 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:02:04.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:02:45.792 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47678 1 40 1 2025-11-13 19:58:58.457 00:05:01.827 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 19:58:58.476 00:05:01.747 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 19:59:16.275 00:05:10.013 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2636 1 2025-11-13 20:03:46.194 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55056 1 40 1 2025-11-13 20:00:56.116 00:05:04.109 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:05:36.636 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39568 9 6412 1 2025-11-13 20:01:56.095 00:05:04.152 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:06:47.397 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40530 1 40 1 2025-11-13 20:02:57.066 00:05:03.201 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:07:04.338 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:07:04.338 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:08:37.847 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36778 9 6412 1 2025-11-13 20:04:36.279 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-13 20:04:58.479 00:05:01.747 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:04:58.459 00:05:01.828 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:09:38.215 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42948 9 6412 1 2025-11-13 20:10:38.621 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37880 9 6412 1 2025-11-13 20:06:56.118 00:05:04.110 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:11:49.406 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49636 1 40 1 2025-11-13 20:07:56.097 00:05:04.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:12:03.989 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:12:03.930 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:08:57.071 00:05:03.197 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:13:39.856 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:45006 10 6452 1 2025-11-13 20:09:56.283 00:05:10.005 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2704 1 2025-11-13 20:14:40.329 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39970 9 6412 1 2025-11-13 20:10:58.459 00:05:01.828 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:10:58.480 00:05:01.748 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:15:40.733 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48130 10 6452 1 2025-11-13 20:16:41.120 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 9 6412 1 2025-11-13 20:12:56.119 00:05:04.108 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:17:04.082 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:17:04.078 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:13:56.099 00:05:04.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:14:57.073 00:05:03.194 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:15:16.286 00:05:10.006 OSPF 23.0.7.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-13 20:19:42.385 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32938 10 6452 1 2025-11-13 20:16:58.481 00:05:01.746 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:16:58.461 00:05:01.826 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:22:04.083 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:22:04.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:22:48.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48876 9 6412 1 2025-11-13 20:18:56.119 00:05:04.110 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:19:56.100 00:05:04.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:23:59.289 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39560 1 40 1 2025-11-13 20:20:36.294 00:05:00.822 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2444 1 2025-11-13 20:24:49.329 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39592 9 6412 1 2025-11-13 20:20:57.074 00:05:03.194 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:26:00.122 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:36414 1 40 1 2025-11-13 20:22:58.463 00:05:01.828 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:26:50.155 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48030 10 6452 1 2025-11-13 20:22:58.483 00:05:01.748 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:27:04.352 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:27:04.445 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:27:50.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36432 9 6412 1 2025-11-13 20:24:56.126 00:05:04.107 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:29:01.351 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39808 1 40 1 2025-11-13 20:25:46.297 00:05:00.902 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2380 1 2025-11-13 20:25:56.108 00:05:04.148 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:29:51.394 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43732 9 6412 1 2025-11-13 20:26:57.082 00:05:03.194 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:32:04.709 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:32:04.578 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:28:58.464 00:05:01.832 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:28:58.484 00:05:01.751 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:33:02.965 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:44574 1 40 1 2025-11-13 20:33:53.002 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 9 6412 1 2025-11-13 20:35:03.774 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:60300 1 40 1 2025-11-13 20:30:56.128 00:05:04.107 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:30:56.300 00:05:10.007 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-11-13 20:31:56.108 00:05:04.148 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:35:53.808 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52994 9 6412 1 2025-11-13 20:32:57.084 00:05:03.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:37:04.627 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:37:04.420 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:36:54.214 00:00:10.562 TCP 1.101.0.1:3000 -> 23.104.0.1:49868 9 6412 1 2025-11-13 20:38:05.173 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:55732 1 40 1 2025-11-13 20:34:58.466 00:05:01.831 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:34:58.487 00:05:01.750 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:39:05.575 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 1 40 1 2025-11-13 20:39:55.617 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50208 10 6452 1 2025-11-13 20:36:16.308 00:05:10.072 OSPF 23.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-13 20:36:56.130 00:05:04.107 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:41:07.059 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:56260 1 40 1 2025-11-13 20:37:56.110 00:05:04.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:42:04.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:42:04.732 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:41:57.123 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41856 10 6452 1 2025-11-13 20:38:57.085 00:05:03.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:43:07.900 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:52732 1 40 1 2025-11-13 20:43:57.948 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:47070 10 6452 1 2025-11-13 20:40:58.466 00:05:01.834 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:40:58.488 00:05:01.753 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:41:36.312 00:05:10.004 OSPF 23.0.7.2:0 -> 224.0.0.5:0 35 2520 1 2025-11-13 20:47:04.776 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:42:56.130 00:05:04.109 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:47:04.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:47:09.526 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54726 1 40 1 2025-11-13 20:43:56.110 00:05:04.149 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:48:09.923 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 1 40 1 2025-11-13 20:44:57.087 00:05:03.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:48:59.964 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:43210 9 6412 1 2025-11-13 20:50:00.340 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35878 9 6412 1 2025-11-13 20:46:58.497 00:05:01.743 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:46:58.478 00:05:01.823 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:46:56.316 00:05:10.153 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-13 20:51:00.742 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55564 10 6452 1 2025-11-13 20:52:04.850 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:52:04.904 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:48:56.144 00:05:04.097 TCP 23.155.0.1:42479 -> 23.152.0.1:179 12 738 1 2025-11-13 20:53:11.923 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:58892 1 40 1 2025-11-13 20:49:56.126 00:05:04.134 TCP 23.152.0.1:179 -> 23.155.0.1:42479 12 738 1 2025-11-13 20:54:01.959 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 9 6412 1 2025-11-13 20:50:57.088 00:05:03.193 TCP 23.154.0.1:179 -> 23.155.0.1:42089 12 738 1 2025-11-13 20:55:02.373 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58712 10 6452 1 2025-11-13 20:56:02.771 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39694 10 6452 1 2025-11-13 20:52:16.345 00:05:10.182 OSPF 23.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-13 20:52:58.471 00:05:01.832 TCP 23.156.0.1:36051 -> 23.155.0.1:179 12 738 1 2025-11-13 20:57:05.023 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 20:57:04.845 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 20:52:58.491 00:05:01.752 TCP 23.155.0.1:179 -> 23.156.0.1:36051 12 738 1 2025-11-13 20:57:13.511 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:50398 1 40 1 2025-11-13 20:58:03.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6452 1 Summary: total flows: 130, total bytes: 251412, total packets: 1349, avg bps: 529, avg pps: 0, avg bpp: 186 Time window: 2025-11-13 19:54:56 - 2025-11-13 20:58:13 Total flows processed: 130, passed: 130, Blocks skipped: 0, Bytes read: 13584 Sys: 0.0046s User: 0.0018s Wall: 0.0021s flows/second: 60719.3 Runtime: 0.0022s